Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: g/fBgmlZM5kQAUemA9Tt1lQjbA3DTD/Rl6g22UmAhlw=
Subject key identifier: F1:74:68:2A:1C:9E:D6:22:91:07:94:F1:14:B3:59:F4:20:85:1B:74
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 0199221E4371D590DCEF25A669EB4743824A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: xRQl+G+B3dx+GhvGLQAZzLP8ofw2WYywE9vuTczUaKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:43:71:d5:90:dc:ef:25:a6:69:eb:47:43:82:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=f174682a1c9ed622910794f114b359f420851b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:66:f5:dc:2e:43:c3:ce:04:06:a6:df:03:06:
3c:0b:50:56:53:3c:78:3d:53:34:68:f1:eb:c5:7e:
48:4a:b3:4b:9a:3e:78:f4:7e:0d:4f:78:a6:ab:ca:
13:a6:90:df:0f:46:39:da:04:3d:e1:e6:d7:2f:d1:
5c:78:b4:51:0c:b8:be:47:21:4b:b6:16:9d:7b:e9:
82:e7:88:b5:5d:1d:6f:9f:89:bf:a9:b1:a3:61:27:
eb:ec:e3:36:4f:e0:1e:ca:b9:33:59:b8:a7:a2:ba:
63:07:25:24:b9:a3:61:bc:58:f4:d5:47:e8:60:2d:
c9:99:b0:01:b8:1f:19:00:ad:20:9c:bd:e0:c2:e9:
0d:2a:34:b6:e6:09:3f:13:da:1c:28:61:bb:62:26:
7c:30:87:49:8d:9c:48:af:c9:7c:38:d6:a7:5a:42:
27:50:7b:30:37:a8:ab:95:9f:b3:b8:7b:ed:75:b0:
62:a5:ed:d1:76:18:fe:23:2d:0b:cc:65:57:00:0b:
0b:9a:c4:87:ac:74:ad:32:79:ee:57:86:bc:bd:73:
b6:8b:c4:87:5c:fb:33:38:de:06:fe:ca:c8:d4:5a:
12:4f:b0:ab:b6:67:24:98:5b:85:bd:22:02:56:c1:
01:df:88:18:81:9c:77:17:97:fa:87:58:1d:cb:91:
a9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:74:68:2A:1C:9E:D6:22:91:07:94:F1:14:B3:59:F4:20:85:1B:74
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:23:49:95:0d:68:90:6c:db:f7:69:23:cc:cd:c3:83:19:87:
3c:a8:37:d7:1a:cb:ec:b9:a6:9b:08:92:8a:52:36:1d:2e:c6:
77:73:6e:af:a8:e4:17:13:30:a1:ff:f8:51:e9:e4:42:7a:b1:
c2:56:8c:d7:b8:6d:3a:c2:38:c3:95:1d:1a:5d:a2:15:3b:bf:
d6:ed:01:0a:2c:fa:08:b4:eb:b8:3f:58:c7:c9:67:93:43:d2:
89:ae:51:8e:5b:4f:0b:97:f7:3d:6b:ab:f8:26:e5:a4:de:16:
c8:e6:2d:8c:2d:d4:d1:a6:4b:96:05:a0:4e:e8:ab:63:b3:9d:
eb:92:df:04:36:a6:e6:73:17:16:af:28:50:be:20:32:a4:84:
7c:ef:01:d2:17:ac:9a:8e:8e:de:13:80:e9:fd:d5:10:5e:a5:
ef:e9:3d:47:d6:55:c5:87:11:41:87:49:2b:b9:ed:14:33:63:
9e:be:5f:df:20:88:11:3a:e1:21:ae:6a:7d:5c:67:47:45:c1:
cf:01:b6:1b:a9:72:4f:04:52:92:49:be:27:43:21:bb:d7:00:
e8:00:21:9e:4f:c5:0e:d5:01:6a:69:5f:ea:63:e3:1e:82:d7:
c5:ac:ee:dc:0b:96:34:4d:38:9b:cb:3a:0f:76:5b:99:9c:af:
21:fa:28:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:33 2025 by rpki-client